Skip to content

Commit 36e28e8

Browse files
committed
OSDOCS-5597 Added regionalized AWS STS URLs to the allow list for PrivateLink
1 parent d4e32c4 commit 36e28e8

File tree

2 files changed

+6
-2
lines changed

2 files changed

+6
-2
lines changed

modules/osd-aws-privatelink-firewall-prerequisites.adoc

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,11 @@ Alternatively, if you choose to not use a wildcard for Amazon Web Services (AWS)
146146

147147
|`sts.amazonaws.com`
148148
|443
149-
|Used to install and manage clusters in an AWS environment.
149+
|Used to install and manage clusters in an AWS environment, for clusters configured to use the global endpoint for AWS STS.
150+
151+
|`sts.<aws_region>.amazonaws.com`
152+
|443
153+
|Used to install and manage clusters in an AWS environment, for clusters configured to use regionalized endpoints for AWS STS. See link:https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html[AWS STS regionalized endpoints] for more information.
150154

151155
|`tagging.us-east-1.amazonaws.com`
152156
|443

modules/rosa-sts-oidc-provider-command.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ When using `manual` mode, the `aws` command is printed to the terminal for your
2222
----
2323
aws iam create-open-id-connect-provider \
2424
--url https://rh-oidc.s3.<aws_region>.amazonaws.com/<cluster_id> \
25-
--client-id-list openshift sts.amazonaws.com \
25+
--client-id-list openshift sts.<aws_region>.amazonaws.com \
2626
--thumbprint-list <thumbprint> <1>
2727
----
2828
<1> The thumbprint is generated automatically when you run the `rosa create oidc-provider` command. For more information about using thumbprints with AWS Identity and Access Management (IAM) OpenID Connect (OIDC) identity providers, see link:https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html[the AWS documentation].

0 commit comments

Comments
 (0)